Effective Date: May 14, 2025
This Privacy Policy describes how easyGDPR.app (the "Controller") processes your information when you use our GDPR compliance tools and services.
We are committed to privacy by design. While we minimize data collection, we do process some technical data to provide and improve our services.
| Data Category | Purpose | Legal Basis | Recipients | Retention |
|---|---|---|---|---|
| IP Address | Service provision, abuse detection, geographic analytics | Legitimate Interest (Art. 6(1)(f)) | easyGDPR.app, trusted analytics partners | 30 days (anonymized afterwards) |
| Country (derived from IP) | Usage analytics, service optimization | Legitimate Interest (Art. 6(1)(f)) | easyGDPR.app | 12 months (aggregate only) |
| Browser Type & OS | Technical compatibility, service improvement | Legitimate Interest (Art. 6(1)(f)) | easyGDPR.app | 12 months (aggregate only) |
We process the limited technical data we collect for the following specific purposes as required by GDPR Article 13(1)(c):
Primary Purposes:
No Profiling or Automated Decision-Making: We do not engage in automated decision-making, profiling, or behavioral tracking of individual users. All data processing is for operational and statistical purposes only.
As required by GDPR Article 13(1)(e), we disclose the recipients or categories of recipients of your personal data:
Primary Recipient:
Third-Party Categories (Limited Access to Aggregated Data Only):
Data Sharing Principles: We never sell, trade, or rent personal data to third parties. Any data shared with service providers is limited to anonymized, aggregated statistics or technical requirements for service operation, and is governed by strict data processing agreements.
No International Transfers: We do not transfer personal data outside the European Economic Area (EEA). All data processing occurs within the EEA under GDPR protection.
Our processing activities are based on the following legal grounds under GDPR Article 6:
Legitimate Interest (Article 6(1)(f)):
Assessment: We have conducted a legitimate interest assessment confirming that our data processing is necessary, proportionate, and does not override your fundamental rights and freedoms.
We retain personal data only as long as necessary for the purposes outlined above:
Retention Schedule:
Automatic Deletion: All personal identifiers are automatically purged from our systems according to the schedule above. After retention periods expire, only anonymized statistical data remains.
To protect your privacy, we deliberately avoid collecting:
Our website does not use cookies for any purpose. For complete details, please refer to our separate Cookies Policy.
We believe in providing a completely cookie-free experience, ensuring that your browsing activity remains private and untracked.
As a data subject under GDPR, you have the following rights regarding your personal data:
Your GDPR Rights:
Exercising Your Rights: To exercise any of these rights, contact us at privacy@easygdpr.app. We will respond within one month and verify your identity before processing requests.
Supervisory Authority: You can lodge a complaint with your local data protection authority. For most EU residents, this is your national DPA. You can find contact details at https://edpb.europa.eu/about-edpb/about-edpb/members_en.
California residents have specific rights under the California Consumer Privacy Act (CCPA):
Your California Rights:
CCPA Disclosure:
| Category | Collected | Sold | Business Purpose |
|---|---|---|---|
| Personal Identifiers | IP Address only | No | Service operation, security |
| Internet Activity | Browser/OS type | No | Technical compatibility |
| Geolocation | Country level only | No | Usage analytics |
We implement appropriate technical and organizational measures to protect your personal data:
Security Controls:
Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites.
Important Notice: When you click external links or use our generated templates to contact other companies, you leave our privacy-protected environment. Always review the privacy policies of other websites and services before sharing personal information.
Our services are not directed to children under 16 years of age. We do not knowingly collect personal data from children under 16.
If we become aware that we have collected personal data from a child under 16, we will take immediate steps to delete such information. Parents or guardians who believe we may have collected information from a child under 16 should contact us immediately.
We may update this Privacy Policy to reflect changes in our practices or applicable law. Material changes will be communicated as follows:
Notification Process:
For any questions about this Privacy Policy or to exercise your rights, contact us:
Email: privacy@easygdpr.app
Website: https://www.easygdpr.app
Response Time: We respond to all privacy inquiries within 30 days
Data Protection Inquiries: We are committed to transparency and will provide detailed responses to all questions about our data processing practices, even though we collect minimal personal data.